Level up your business security with free, on-demand training and certification. Explore 1Password Academy today →
Forum Discussion
rianjs
20 days agoNew Contributor
Bug: Secure Note silently URL-encodes non-pretty JSON content between detected URLs
Reproduction:
- Create a new Secure Note.
- Paste a JSON blob that contains two or more URLs separated by other JSON content. For example, a Google OAuth credentials.json file, make sure it's not the "pretty" version
- Save the note
- Copy the note contents back out
Here's a specific case:
{"installed":{"client_id":"the-client-id","project_id":"the-project-id","auth_uri":"https://accounts.google.com/o/oauth2/auth","token_uri":"https://oauth2.googleapis.com/token","auth_provider_x509_cert_url":"https://www.googleapis.com/oauth2/v1/certs","client_secret":"the-secret","redirect_uris":["http://localhost"]}}Yields:
Interestingly, the "pretty" version of the JSON round-trips just fine, though it looks weird in the 1Password UI:
{
"installed": {
"client_id": "the-client-id",
"project_id": "the-project-id",
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
"token_uri": "https://oauth2.googleapis.com/token",
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
"client_secret": "the-secret",
"redirect_uris": [
"http://localhost"
]
}
}Yields:
Version:
No RepliesBe the first to reply